This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Yaroslav_Basenk
Participant
‎2020-05-26 10:36 AM

IPsec L2TP with ClusterXL

Hi guys,
I am trying to configure a Windows IPsec \ L2TP (Pre-shared Key) client connection for  ClusterXL and for standalone gateways. Authentication through AD. I made all the settings by the SK140832. All vpn setting on ClusterXL and on others gateways are the same.

The older client support must be enabled for AD-auth support

AD-support.JPG

Other settings

Global-Settings.JPG

vpn-blade-settings.JPG

 

But the connection only works for standalone gateways. For ClusterXL, I see an error in the logs: “This IKE SA should be used only for L2TP. Probably a computer certificate. "

 

For ClusterXL:

failed_login.JPG

For others standalone gateways - the connection is perfect

Login.JPG

Does anyone have an idea - why?

0 Kudos
2 Replies
PhoneBoy
Admin
Admin
‎2020-05-26 05:06 PM

There were definitely some issues with L2TP previously: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Recommend applying the latest GA Jumbo Hotfix.
If you're still having an issued, best to engage with TAC.
0 Kudos
Yaroslav_Basenk
Participant
‎2020-05-29 12:21 AM
In response to PhoneBoy

The Take 196 solved the issue.

0 Kudos